https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:59:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-25041 cnvd-2017-25041 https://cve.radiocsirt.org/vuln/cnvd-2017-25041 https://cve.radiocsirt.org/vuln/euvd-2026-73295 EUVD-2026-73295 https://cve.radiocsirt.org/vuln/euvd-2026-73295 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5247 <p>Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticated user who views the attacker-supplied file name. All versions of SFT prior to 5.1.1028 are affected. The fix version is 5.1.1028.</p> <p>Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticated user who views the attacker-supplied file name. All versions of SFT prior to 5.1.1028 are affected. The fix version is 5.1.1028.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5247 https://cve.radiocsirt.org/vuln/ghsa-v4g7-jggm-2x5q <p>Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticated user who views the attacker-supplied file name. All versions of SFT prior to 5.1.1028 are affected. The fix version is 5.1.1028.</p> <p>Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticated user who views the attacker-supplied file name. All versions of SFT prior to 5.1.1028 are affected. The fix version is 5.1.1028.</p> https://cve.radiocsirt.org/vuln/ghsa-v4g7-jggm-2x5q https://cve.radiocsirt.org/vuln/gsd-2017-5247 gsd-2017-5247 https://cve.radiocsirt.org/vuln/gsd-2017-5247